CVE Tools
Track your stack

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

The Hacker NewsBy The Hacker News

Reported exploitedPeopleSoftShinyHunters

Our summary

ShinyHunters claims it breached the FBI and obtained data on current and former employees, as well as FBI job applicants. The group says it used an undisclosed Oracle PeopleSoft pre-authenticated RCE flaw to compromise FBIjobs.gov, while CVE-2026-35273 was previously exploited by the group against enterprise networks; the FBI is investigating the claims.

Read at The Hacker News

The Hacker News publishes this story on its own site; we link to it rather than reprint it.

  1. BleepingComputerShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacksCVE-2026-35273
  2. The Hacker NewsAttackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web ShellsCVE-2026-35273
  3. SecurityWeekShinyHunters Claims FBI Hack, Demands Retraction of Threat ReportCVE-2026-35273
  4. Kaspersky SecurelistExploits and vulnerabilities in Q2 2026CVE-2026-35273
  5. Rapid7 BlogWhat’s New in Rapid7 Products and Services: Q2 2026 in ReviewCVE-2026-35273
  6. The Hacker NewsThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More StoriesCVE-2026-35273
  7. Хакер (xakep.ru)Из-за взлома Oracle PeopleSoft у компании Nissan украли данныеCVE-2026-35273
  8. BleepingComputerOver 900 Oracle E-Business instances exposed to ongoing attacksCVE-2026-35273
  9. SecurityWeekNissan Employee Data Breached in Oracle PeopleSoft HackCVE-2026-35273
  10. The Hacker NewsOracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the WildCVE-2026-35273

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store